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Method of receiving messages transmitted from vehicle to vehicle 



The invention relates to a method of receiving messages transmitted from 
vehicle to vehicle and containing information relating to traffic. 



5 The transmission of messages according to the precharacterizing clause, also 

known as car-to-car communication, is known for example from US 20020198632 A and 
allows vehicles to cooperate with the assistance of sensors in order to avoid accidents. Thus, 
for example, subsequent vehicles may be made aware of a traffic jam or an accident. 
Likewise, at crossroads and junctions the traffic may be made aware of vehicles with priority 
10 (police, fire service). The information obtained by way of this communication may only be 
used to provide the driver with information or to bring about intervention in the vehicle 
control system. 

With such communication systems, data security is essential. In particular, 
falsified messages must not be allowed to cause accidents. Various methods of ensuring such 
1 5 security have become known, for example 

- Junko Yoshida: Suppliers to add security features to wireless comm chips; 
ht^://www.eetimes.com/story/OEG20021121S0042; EE Times Nov. 22, 2002; 

- Magda El Zarki et aL: Security Issues in a Future Vehicular Network; 
Department of Information and Computer Science, University of California, Irvine; presented 

20 at European Wireless 2002 conference, Florence, Italy; Feb. 2002; 

- A. Eskandarian et aL: Assessment of Vulnerabilities in In- Vehicle Intelligent 
Transportation Systems; Center for intelligent Systems Research at George Washington 
University, Ashburn, VA. http://www.cisr.gwu.edu/research/security details.html 

These methods apply cryptographic methods, which, given the large number 
25 of network nodes (vehicles) and the limited computing capacity in vehicles, cannot be 
performed with the necessary speed and reliability. 

It is additionally known from I. Chisalita, N. Shahmehri "A novel architecture 
for supporting vehicular communication" IEEE 56th Vehicular Technology Conference, 
Vancouver, Canada, 24-28 Sept 2002 to filter vehicle-to-vehicle messages with regard to 
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relevance and as a function of traffic conditions. However, data security aspects are not 
addressed therein. 

The method according to the invention increases security against falsification 
of messages or the introduction of false messages, in that information from received 
messages is only accepted when a number of identical items of information are received, 
wherein the number is greater in heavy traffic than in light traffic. 

The method according to the invention exploits the redundancy which is 
present in those traffic situations in which vehicle-to-vehicle communication is particularly 
important. The method according to the invention is suitable for other situations too, 
however, for example if a vehicle uses an extremely infrequently used road at night. 
Application of the method according to the invention does not exclude the simultaneous 
application of cryptographic methods. 

Various designs of the method according to the invention are directed towards 
the detection of traffic density. Thus, for example, it is possible for the traffic density to be 
measured by sensors on the vehicle in which the messages are received. In particular, the 
sensors may in this regard determine the number of transmitting vehicles in the receiving 
range or the number of vehicles traveling past. 

Another possible way of determining traffic density consists in obtaining the 
traffic density from a stationary information system. A suitable information system for this 
purpose is for example the DAB (= digital audio broadcasting) TMC (= traffic message 
channel). 

A further embodiment of the method according to the invention is 
characterized in that the number depends on further variables. These further variables may be 
taken from a digital road map. However, the user's individual data stored in an appropriate 
database are also suitable. In addition, the further variables may include at least weather and 
road condition information. 

An advantageous design of the method according to the invention consists in 
the fact that the number depends on weighting of the respective information. For the purpose 
of weighting, information about the road network and/or the user's individual data and/or 
measured data may be used, which are obtained by means of vehicle sensors. 

The method according to the invention may additionally be characterized in 
that the information which is accepted is displayed and/or brings about intervention in the 
control system of the vehicle. 
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In the context of the present invention, the term "message" includes a range of 
information, for example also an indication of the transmitting vehicle and of the location of 
the transmitting vehicle. The information tested for redundancy in the context of the 
invention constitutes part of these messages and is limited only to the event to be reported in 
5 each case, for example "road closed in ... km". If, therefore, in the context of the method 
according to the invention messages are only accepted where a number of identical items of 
information are received, the definite intention is that these identical items of information 
should be contained in different messages which may originate from different vehicles. 

10 

The invention will be further described with reference to examples of 
embodiment shown in the drawings to which, however the invention is not restricted. In the 
Figures: 

Fig. 1 shows vehicles on a road to illustrate both known vehicle-to-vehicle 
15 communication and such communication according to the invention and 
Fig. 2 is a block diagram of an example of embodiment. 



Fig. 1 shows a road 1, on which two vehicles 2, 3 have collided and are thus 
20 blocking the road. It should be assumed that at least one of the vehicles 2, 3 is intact to the 
extent that the transmitter and the associated sensors are functional. Information about this 
accident is then emitted by this vehicle. It should additionally be assumed that the vehicle 4 
brakes sharply and likewise comes to a standstill and emits a corresponding message. 
Vehicles 5, 6, 7 receive these messages. In each case a warning is output to the driver. 
25 With the known method, such a message can be imitated, such that 

troublemakers could cause the drivers of vehicles 5, 6, 7 to perform emergency braking. With 
the method according to the invention, in the example given the warnings in the vehicles 5, 6, 
7 would be triggered only on receipt of messages from vehicles 2 and 4. Given the large 
number of vehicles which travel on one and the same road in heavy traffic, in practice many 
30 more identical items of information are required, so making it much more difficult to 
generate erroneous messages, whether deliberately or not. 

The example of embodiment according to Fig. 2 is illustrated as a block 
diagram. However, this does not mean that the method according to the invention is restricted 
to being implemented by means of individual circuits corresponding to the blocks. Rather, 



WO 2005/017854 



4 



PCT7IB2004/051430 



the method according to the invention may be implemented particularly advantageously by 
means of large-scale integrated circuits. In this regard, microprocessors may be used;which, 
with suitable programming, perform the processing steps illustrated in the block diagrams. 

The messages received by a suitable receiver are fed at 1 1 to the device 
5 illustrated in Fig. 2 and arrive at a filter/counter 12 and a weighting generator 13. In the 
filter/counter 12, the number of messages with in each case identical content are counted 
separately. In the weighting generator 13, the priority transmitted with the message and 
possible responses in the case of automatic intervention in the vehicle control system are 
evaluated. The weighting generator 13 and a subsequent weighting filter 14 receive data from 

10 a database 15 with a digital road map. In this way it is possible, for example, for messages 
which relate to the opposite carriageway of an expressway or to an additional road running 
parallel to be provided with low weighting. 

A further database 16 contains the user's individual data and preferences, 
which the user may in each case adjust to his/her requirements. The database 16 for example 

1 5 additionally contains data for vehicle owner identification and further data necessary for 
encryption and authentication. These are likewise applied in the weighting filter 14 for 
weighting the messages. Finally, current measured data from vehicle sensors 17 are also fed 
to the weighting filter 14. For example, a message which is weighted very heavily when the 
vehicle is moving may be relatively unimportant if the vehicle is stationary. If a number of 

20 identical items of information are stored in the filter/counter 12, the respective information 
takes on a corresponding degree of trustworthiness. By performing a comparison at 1 8 with 
the output data of the weighting filter 14, it is finally decided whether to accept the 
information and output it at 19, for example to a display unit or to a vehicle control system. 



